10
3.2.2.2 WPA/WPA2 Encryption
Wi-Fi Protected Access (WPA) is an encryption method for WLAN. WPA contains the WEP architecture, but offers additional
protection via dynamic codes, which are based on the Temporal Key Integrity Protocol (TKIP), and also offers pre-shared keys
(PSK) or extensible authentication protocol (EAP) for user authentication. However, a radius server is required for this. WPA2 is a
development of WPA and uses a different encryption algorithm, advanced encryption standard (AES).
WPA offers two types of authentication, either pre-shared key or authentication via special authentication protocols, which are
generally variations of EAP (Extensible Authentication Protocol). An authentication server (RADIUS server) is used for the latter
authentication method, which is rarely used for private applications. Your administrator can give you the information you require to
confi gure this authentication method.
WPA pre-shared-key (recommended
for most users)
First select whether you want to use
WPA with TKIP encryption algorithm,
WPA2 with AES encryption algorithm
or the WPA Mixed mode. The mixed
mode allows clients using WPA or
WPA2 to access the access point.
The mixture is very practical as
presently few XP clients are WPA2
compatible. If the mixed mode is
switched off, the AP only allows
WPA2 clients, and the large number
of WPA (TKIP) devices cannot
connect.
Then you must select the key format
(Pre-shared Key Format). Select
either Pass phrase for a key with
a length of at least 8 and max. 63
characters, whereby letters (A-Z),
numbers and punctuation marks can
be used, or Hex for a 64 character
key, in which only numbers from 0-9 and letters from a-f can be used.
The next step is entering a key, called a pre-shared-key (PSK). All clients which are to access the access point must know this
character string.
Click Apply to save your settings. You must then restart the router for the settings to take effect. To do so, click Apply in the next
window. The wireless network with encryption is available after you restart.
WPA RADIUS (requires a special authentication server)
First select whether you want to use WPA with TKIP encryption algorithm, WPA2 with AES encryption algorithm or the WPA Mixed
mode. The mixed mode allows clients using WPA or WPA2 to access the access point. The mixture is very practical as presently few
XP clients are WPA2 compatible.
Select WPA2 (AES) only. The AP only allows WPA2 clients, and the large number of WPA (TKIP) devices cannot connect.
Next enter the RADIUS server IP address. The RADIUS Server Port is preset to 1812. Enter the password for the RADIUS Server.
Click Apply to save your settings. You must then restart the router for the settings to take effect. To do so, click Apply in the next
window. The wireless network with encryption is available after you restart.